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Quantum private states are the states that represent some amount of perfect secure key. A simple 
symmetry of any generalised private quantum state (ie. the states that represent perfect key but 
not fully random) is provided and extended on Devetak- Winter so called ccq (classical-classical- 
quantum) and cqq (classical-quantum-quantum) lower bound on secure key. This symmetry is 
used to develop a practical method of estimating the Alice measurement that is optimal form the 
perspective of single shot Devetak- Witner lower bound on secure key. The method is particularly 
good when the noise does not break the symmetry of the state with respect to the lower bound 
formula. It suggest a general paradigm for quick estimation of quantum communication rates under 
the symmetry of a given resource like state and/or channel. 



Entanglement is a considered as a resource in quantum communication and computing. It has many intriguing 
properties ril . Any BB84 type protocol [2j is formally equivalent to some version of entangled based protocol of the 
type E91 Bennett et al. pointed out on specific scheme j4j which was later naturally extended to a quantum privacy 
amplification QPA [5] based entanglement distillation protocol (SJ- The latter is a protocol that distills maximally 
entangled states out of a mixed states in a well defined way. In QPA it is eavesdropper that is representing the noise 
and the distillation procedure is aimed at remove the correlations with eavesdropper in the process that produces a 
pure output state - maximally entangled state that is a source of perfect key. It seemed that this QPA is necessary 
to get privacy. However there exists nondistillable entanglement called bound entanglement [7 for which by the very 
definition QPA in its original form can not work. It turns out that there is another possibility of distilling secret key 
by distilling private states pi that are generalisations of maximally entangled states - they provide secret key under 
the measurement in a fixed basis on some part of the system. The measurement basis may be unique and that is what 
makes the private states more general form maximally entangled ones for which there are infinite many pairs of local 
bases that provide secure key. The distillation of private states allow to provide secret key form bound entanglement 
(see [8]) showing in particular a possibility of drastic separation between amount of pure entanglement that can be 
distilled from a quantum state (called distillable entanglement and denoted by D) and amount of secret key that can 
be distilled from the same state (called disiilalble secret key and denoted by K). Recently the separation D < K 
was experimentally demonstrated together with the illustration how inefficient may be the original entanglement 
distillation based scheme, if compared with p-bit based protocols [9]. 



According to |10| any state containing perfectly secure key corresponds to a pure state shared by three parties 
Alice, Bob and Eve. Unlike the eavesdropper subsystem E with a Hilbert space He the subsystems of Alice and Bob 
are composite and correspond to the tensor products of Hilbert spaces Ha (X" Ha' and Hb ^Hb' respectively. We 
call the subsystem corresponding to the pair A,B the key part since this is the part that is used for key generation 
by local von Neumann measurements while the pair A'B' is called the shield part since it is in a sense responsible for 
protecting the key. The above structure allows to write explicitly the pure state of the three parties which represents 
a perfectly secure random a perfectly secure random statistics p = [po, It is a pure state \^aa'BB') of the 

following form which we shall call generalised private states: 



for some fixed \^a'B'e), some unitaries U^;^, and probabilities {pi = |ciP}- The basis \ii)AB is called the secure 
basis since after performing the local von Neumann measurements in that basis Alice and Bob share the correlated 
probability distribution {p^^ = SijPi}flI^ which is completely uncorrelated form the system E. Here we do not assume 
them to be necessarily = ^ as it is in the case of the private states. In fact the density matrix corresponding to the 
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II. A USEFUL SYMMETRY OF THE GENERALISED PRIVATE STATES 
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state vector ([T]) is of the form: 

Ppriv = ^C^Cj[\ii) {jj\]AB «) [I*.) {'^jlU'B'E, (2) 

where we put l^*;) = [Ua' b' ® Ie]]"^} A' B' e dropping the superscripts A'B'E. If Ahce and Bob measure the subsystems 
AB in some basis {lei)^}, {\fi) b} and trace the shield subsystems A'B' they get the so called the form of the CCQ 
state with respect to the (product) basis Bab — {\eifi)AB = \ei}A <8i l/i)^}: 

d-l 

i=0 

with some probability distribution qi. It happens that if they choose the basis {|e,;/j)/is} to be just equal to the 
secure one — {\ij)AB} then the above state reduces to the product form 

p^^CQ'^AB ^ (^pi[\ii) {ii\]AB)(^PE 
i=0 

with Qi = Pi- Because of the explicitly product form - no correlations of the E system with the key part AB are 
present here. Before proving some new property let us remind that the so called CQQ state with respect to the basis 
Ba ~ {I Si) A which results form Alice local von Neumann measurement and tracing out both A'B': 

PAB^'''"=E*l^')(e^lA®PBi^ (3) 
i=0 

Note that measuring the private state in the local basis i?^ being just the reduction of the product secure basis 
B\g we get still the CCQ state in the form ^ rather than the general CQQ state (note that any CCQ state is a 
CQQ one but not vice versa) which is a consequence of the private character of the state. 



A. The Devetak- Winter protocol rates 



We have a natural definition of the key rates in one-way protocols obtained by measuring the state first in some 
local basis Ba or a product one Bab which will produce the CQQ or CCQ state respectively and then calculating the 
difference of the Holevo functions of the states: 

K'^UPABe) = lA-MpTi) - lA-.EipTi) (4) 

with yO^g, p^% being a suitable reductions of the state p'aee '^'^ resulting form the original state pabe after the local 
Alice measurement associated with the basis Ba- In full analogy we have 

kI-^{pabe) - Ia:b{p3S) - IaApTe) (5) 

with the suitable reductions of the state p'abe''^'^" resulting form the original state pabe after the product of the 
two local Alice and Bob measurements corresponding to the bases Bab- The role of the function / is played just by 
the mutual information function /. 



B. General symmetry rule and its simple application 

In what follows we shall use the notation U{X) = UXW and M{{Pk}){X) = J^kP^XPh with a projectors 
Pfe = P{ek) = \ek){ek\ for any orthonormal basis {efc}. We have a simple 

Observation .- Consider a function / defined on any CQ state on the composite system XY 

fc 
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Assume that the function / is invariant under some subgroup TZx of unitary operations Rx € Tlx on the system X 
ie. 

yR,,en.fiRx ® /y(a^?) = /(^S?) (7) 
Given any state pxv which is invariant in an analogous way 

'^RxeiZxRx ® IvipxY) = PXY (8) 

we have the foUowing identity 

f{[Mx{{Rx{Pk)}) ® IyKpxy)) = fi[Mxi{Pk}) ® IyKpxy)) (9) 

for all Rx G Tlx and all {Pk} constructed from any orthonormal bases {cfc}. 

Proof. - It is obvious to see that internal" -R^ is absorbed by the QQ state pxY while the external conjugated 
one Rx is absorbed by the invariance of the function /. 

We have immediate conclusion: 

Conclusion.- The functions Q and ([5|, if calculated on a given generalised private state ([2]), are invariant under 
the rotations Ra ® Ibe and Ra ® Rb® Ie respectively where Ra, Rb are any unitary operations which are diagonal 
in the local bases \i)A, \3)b forming a secure basis of the states ([2|. 

Proof .- The role of the pair of the subsystems {X, F} is played by {A, BE} or {AB, E} respectively and the role 
of the subgroup are all the unitary operations diagonal in the bases described in the conclusion. 



C. Consequences 



In the case, when the key part dimension d = 2, this feature can be interpreted graphically. Let us consider CQQ 
case. Then Alice can choose two angels (6, tp) to determine her measurement basis using the eigenvectors of the an 
operator 



|eo (0,^)) 



cos I 
sin ! 



sm2 

e"^ cos \ 



(10) 



We define the function KD{0,tp) = {p^rtv'^'^'^^ ■ Here superscript C{9,ip) denotes that to calculate CQQ state 

base vectors determined by angels {0,ip) were used. In spherical coordinate system, in which |eo (0, 0)) , |ei (0, 0)) 
coincide with the base vectors used in ^ the function K£i{9,(p) is ip independent, i.e. becomes function only of 6 
angle. 



III. PROCEDURE 



As follows from the previous section, points on the sphere^ possessing the same vale of Kd establish a circle, whose 
center is located at intersection of Z axis and the sphere. Moreover, each circle has a center in the same point (all 
circles are concentric). At this point vale of Kjj is maximal. Using facts presented in Subsection II C one is able to 
find such angles 9 Max, fMax, for which the measurement in basis given by ( 10 ) will lead to the maximal value of Ku, 



without a priori knowledge of this basis or rotations by which the state was changed. Suppose that the original ideal 
state was rotated by unknown transformation Ua €5 Iba'B' which eventually changed its optimal measurement basis 
on Alice side from {\0z) , jlz)} to {\0n) , |lfi)} where we define h ~ Oz as: 



|0,-0 {Onl^U \0,) (0^1 = 1(1 + {Oz)ff) 

\ln) {ln\ ^ U \U) {U\U^ =^-{I-{Oz)a). 



(11) 



The procedure is as follows. 



Points on the sphere correspond to angles used in JlOk. The term sphere should not be confused with the Bloch sphere of the state. 
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1. First one chooses arbitrary values of angles Oq, (po and establishes two base vectors |eo {Oq, (po)) and |ei {9q, (fo))- 
This basis is used to perform measurement and to obtain value of Kd(9q,lpq) equal Kjjq. 

2. Then one changes the value of 9q to 9i and creates a set of base vectors {|eo (^i, ^Pi)) , |ei {Oi, 'Pi))}f^i. Vectors 
from this set differ in the value of ipi angle by arbitrary constant factor ^ so that < (pi < 27r. One can ascribe 
each vector from the set to a corresponding point on the sphere. These points lay on a circle, whose centre is 
located at the point ascribed to vector |eo {Oq, (po))- 

3. Subsequently, using the vectors from the set, the measurements are performed and for each pair of vectors 
|eo {9i,(pi)) , |ei {9i,(pi)) the value of Km is calculated. A set of values Kd,n ={Kdi, • . • , Kdn} is created. 
The aim of these measurements is to find two points laying on a chosen circle, characterized by values of (pi 
angle, for which value of Kui is equal to earlier calculated value Kdq. It is not difficult to see that it is always 
possible to achieve this purpose when we assume continuity of ip (or arbitrary small resolution in ipi). According 
Subsection |II C[ because the sphere is covered with circles with the same value of Kd, any other circle laying on 
the sphere can have 0, 1, 2 or infinity intersection points. Thus it is always possible to find such values of ^ij 
which ensure that points with the same value of are found. Just as for a plane, three points on the sphere 
are enough to unambiguously determine the circle. The radius and the centre of the circle are found solving the 
system of equations: 



where d is spherical distance defined as 



d{9Max,'PMax, (^Oi fo) — R 
d{9Max,'PMax,0i, ipi) — R 
d{9Max,'PMax,0i, 'P2) — R, 



d = arccos(P • Q), 



(12) 
(13) 
(14) 



(15) 



here P, Q are two points on the sphere characterized by angles 9i,p>i and 9j , ipj , respectively. In therms of 



Cartesian coordinates {x — sin cos y — sin sin and z — cos 9) expression (151 is of a form: 



d{9i,ipi,9j,ip.j) = 

= arccos(sin0i sinflj cos{pi 



cos 9j cos 6*1 



(16) 



According to Subsection II C| centre of the circle determined in this way is associated with the basis (characterized by 
angles 9 Max: 'PAiax), in which Ku (0, (p) has maximal value. Fig. [T] presents main ideas of the proposed procedure. 

The proposed procedure can be slightly modified. Finding two points with value of Kjji exactly equal Kdo 
can cause a problem and such solution is not a practical one. To overcome this difficulty, instead of finding two points 
with the same value of Ko, one finds points Kjji, Kd2 from the set Ko,n, for which the values of Koi, Kr)2 are the 
closest to the Kuo i.e. for which AKjji — K^q — Kjji and AK]j2 = Kdo ^ Kd2 are minimal. Subsequently the 
interpolating function I{Ko n} (^iiV') from the set Kd.n is created. To construct the interpolation fimction Hermite 
polynomials of a required order are used. Thus one can write for i = {1, 2}: 



Knn = 



= K 



Di 



AKm 



K 



D \Oi 



dip 



Aipi 



dip^ 



(17) 



9I{Kn.N} (fl'V) 



d^I[K^^,yi9,,^) 



dip"^ 



dp 



Aipi 



where we use the fact that I{Kd n} (^i' Vi) = ^Di (i-e. the interpolation function reproduces the values of K^i from 
the set Kd.n in the probe points). One solves equation (17l for Aipi, i = {1, 2}. In general, equation (17) can have 
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two different solutions. However, in such a case one cfiooses smaller Ai^si and Aiy92 (because equation (17) is Taylor 
expansion of function I{Kd n} (^ii ^) near ip = ipi). By solving modified systems of equations: 



d{6Max, VMax,6o, fo) — R 
d{9Max, 'PMax,dl,'Pl + At^i) = R 
d{9Max, ^Max, dl,ip2+ Atpa) = R, 



(18) 
(19) 
(20) 



one obtains values of 9 Max, 'fiMax- 

The proposed approach enables to find the basis optimizing the value of by performing only local measurements. 

IV. ERROR ESTIMATION 



Due to approximation (finite sum) and possible numerical errors, it is never possible to solve (17) exactly. As a 
result angles 9'j^j, ip\j will not lead to the maximal value of distillable key. In this section the estimation of this error 
is provided. Let us denote (see Fig. |2]): 

<Pi = "^1 + A(/3i = ip'^ + A(pi 

<^2 = ¥'2 + A(^2 = V2 + 
9m + A^M = 

i^M + A^SM = <y3M- (21) 

Without loss of generality, we can arrange <^i,(^2 so that (pi > Lp2. Spherical distance between points characterized 
by angles {9i,(pi), {9j,^pj) is given by (15 1. We assume that {9i,ipi) — (0,0), so 



Combining [23| and [24| we get: 



arccos [cos 0^/] = R 

arccos [sin 9i sin 9'j^,j cos {(pi — p'm) + cos 9i cos 0^,^] = R 
arccos [sin 9i sin 9'm cos {ip2 — '■p'm) + cos 9i cos 9\,j\ = R. 



cos (.^1 - iPm) = cos {02 ~ <^'m) 



(22) 
(23) 
(24) 



(25) 



Because ipi ^ (p2 and Lp\i £ (0, 27r] there are two possibilities: (p\ — Lp\^ = — {(p2 — p'm) or pi — p'm 
— (<P2 — 'p'm ~ 27r) . We set yj^j := p'^^j mod 27r 



ipi + ip2 



Pm + A^SM = 



P1+P2 , A(pi + Ap2 



(26) 



so ApM = ^^i±^^. However, we know only p'^^, Ap'^ but we can estimate (see Fig. ^ as \Api\ < Ap — \Ap'^ \ . As a 
result 



ApM < 



2A^-|A^'i|-|A^y 



(27) 



Combining equations ( 22 1 and ( 23 ) 



As a consequence of the equality 



cot 9'm = cot ^ cos (.^1 - p'm) . 



(28) 



cos (pi - p>'m) = cos l^pi + Ap3i 
' Pi + Api - P2- Ap>2^ 



Pl + Api + P2+ Ap)2 \ 

2 ) 



(29) 
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we obtain the following relation 



0M — arccot 



cot — COS 



'P2 



and 



9m + ^O'm — arccot 



cot y COS (.^1 - ip'm) 



(30) 



(31) 



In order to obtain the upper bound on A0^^ we have to find 6m - an lower bound on 6m ■ Then the following relation 
holds: 



9m + ^6'f^.i < 9m + ^d'j^j = arccot 



cot y cos ((^1 - ip'm) 



(32) 



so A0^j < arccot [cot ^ cos {(pi — ^'m)\ ~ ^m- We have to estimate the difference (pi — (^2 using known quantities 
(pi,(p2. There are two different possibilities: in the first one ipi ~ (p2 < whereas in the second — <^2 > ^r. Let us 
consider the first one. Because arccot x G (— f , f] is a decreasing function for x G (— oo,0) U (0, c«), in order to find 
6m we have to increase cos ( '^^~'^^ ). For our purposes we shall assume the worst case, namely (fi < ipi and (^2 > <y52- 
Then ipi — > 'fi ^ 'P2- From previous considerations the following relation holds: ipi + Aip > ipi > ipi — Aipi. As a 
result ^1 — ip2 + 2A</7 > ipi — (p2 > ipi — (p2- Using this inequality we get 



6m > 6 Ml — arccot 
li ifi — (p2 > n the similar line of reasoning leads to 

6m > 6m2 = arccot 

Finally one gets 



cot — cos 



(p2 + 2A(/9 



1 I •f>i-(p2- 2A(^ 
cot — cos 



Ad'M < arccot 



cot y cos((^i - (p'm) 



J Mi , 



(33) 



(34) 



(35) 



where 9Mi,i = {1, 2} is given by (33) or (34). Using perturbed points {9i, (fit) one obtains the point {6m + A6m, + 
A(^M)which differs from the real point {6m, fM) by {A6m,Aipm), where A6m,Aipm are given by ( [sT] ) and (27). In 
the new coordinate system associated with the point {6m + A6m, 'Pm + ^Vm) the error is given by: 



A6 = arccos [ sin 9m sin {9m — A6m ) cos A0jv/ 
+ cos e'^cos {6'm - A6m)] ■ 



(36) 



V. INVARIANCE AND CHANNELS 



According to [TU], using appropriate unitary operation [/ = 1^ (g) J2i I*) (^1 ® ^A'B' (called twisting) it is possible to 
write a particular private state as: 



where is one of the four Bell states |^±) , \<j>±) 

|00)±|11) I , , |oi)±|io) 



(37) 



(38) 



After sending (37) down the channel A^ / where A^(-) = J2iPi^i{')^i with Ki — {I ,(JxT<Jy,<Jz\ one obtains 



state 



Ppriv 

P2 10+) ® ^A'S' +P3 \<P-) {<P-\ab'^'^A'B'- 



(39) 
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The purification of tliis state is given by 



/ prtv Y Z 



ABE 



'ABE 



^{m)ABK)ABE 



{m)ABK)ABE 



\^^)abK)abe) \^)e 
\^^)abK)abe)We 

mABK)ABE)\^)E 
|10>Ai3|*iW)|3>B: 



(40) 



wliere E denotes new Eves' subsystem. We calculate the cqq state using base vectors defined by (10). The nonzero 
elements of the reduced AB matrix are given by 



floooo 


= eoo 


2 ^ . 


-P4) 


■f sin^ 


2^2 


+ P3) 


aoioi 


= en 


' • 2 ^ . 

sm - {pi 4 


P4) - 


f cos^ 


^b2 


+ P3) 


iioio 


= eoo 


' • 2 ^ . 

sm - [Pi 4 


P4) - 


f cos^ 


2^2 


+ P3) 


Ollll 


= en 


' 2 ^ , 
cos - (pi 4 


'P4) 


-f sin^ 


2(^2 


+ P3) 


flooio 


— ^0100 ~ ^01 




. 61 

sm - 
2 


9 

cos- 




Pi) + 




6 6 
sin - cos - {p2 


-Pa) 










flioii 


= flnio = eoi 




. 61 

sm - 
2 


9 

cos - 
2 


(P4 - 


Pl) + 



(41) 



e ''^sin-cos - (p3 -P2) 



The reduced AB matrix is block diagonal so its eigenvalues are 



Ai 



2 ^'^oooo + ooioi ± \/ (floooo + floioi)^ — 4 laoooiT 



^2 = ^ [ aioio + onii ± V (oioio + aiiii)^ - 4 |aoni|^ 



(42) 



As a consequence, I(A:B) will be independent of Lp angle if and only if {pi — p^) = or (p2 ~ P3) — 0. Moreover 
I{A:B){(^) ^ -^(A:S)(0)- To show that I(A:EE){^^ v) — ^{A:EE)i^^ f) l^t US Consider a state resulting from the measure- 
ment performed on E subsystem. This operation does not increase the value of I^a-.ee)- Then, the reduced AE_B 



matrix resulting from the measurement has following eigenvalues Ai^2 
obtain I(A:E)(0,(p) = I(A:E){0, 'p)- 



El 
2 ' 



P2 

2 



,Ai,: 



,Ai, 



p± 



so we 



VI. NUMERICAL RESULTS 



In this section we provide some examples of the results obtained by implementing the above procedure numerically. 
Rotated pswAP state. - Consider a private state introduced in [S] and realized experimentally |11] 

PSWAP= + 

(43) 



FIG. 1: Local Alice's sphere with two different coordinate systems. Z axis corresponds to 6 Max, ^Max angles whereas Z' to 
6(1, (po angles. Black circle shows the path along which angle ip changes. At the intersection point between Z axis and the 
sphere KoiOhtax, ^fiMax) = KoMax- The intersection point between Z' axis and the sphere is denoted by (0o, Vo)- At this point 
Kd{9o, fo) = Kdo- Points with the same value of Kd (laying on a circle, whose center is located at the point Kdo) are denoted 
by (01, (pi) and (Si, 1^32). At the first point KD[di,^i) = Kdi, whereas at the second point KD{di,^2) = Kd2- 



This state was rotated and then the optimizing procedure was applied. The example of the results is shown in Fig. [3] 
Depolaraizig channel. - The procedure was checked using the rotated state pswAP = ® Iba'B', where A(p) — 

p| + (1 — p)p. The example of the results is shown in Fig. 4 

Phase flip channel. - Another test was performed usmg the rotated pswAP — ^A ® Iba'B', where A(p) = 

PP+ {1— p)azP(Jz- The example of the results is shown in Fig. [5] 

Rotated mixture of pswAP o-nd pmswap states. - Another example of the private states is a state 



1 



pMSWAP 



I'^-X'^-l® Uloo> (oo| 



10+) (</)+! ® 



11) (111 I*- 



(vf- 



(44) 



This state plays a role in bound entangled secure key [T3]. We checked the procedure using rotated mixture of two 
private states ppriv = PPswAP+ii-p)pMSWAP and the rotated pswAP = ^a^IbA'B', where A{p) = pp+{l-p)azP(Tz. 
The example of the results is shown in Fig. [6j 

Qubit channel with trigonometrical parametrization. - Consider a channel given by the Kraus operators |14j 



K2 



u 


v 


/ + 


" . u 


. v 


COS- 


cos- 


sm — 


sm — 
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2. 
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. v 




" . u 


v 


cos- 


sm- 


(Jx - i 


sm- 


cos- 











(45) 



which transforms the Bloch vector r = [rx^ry^r^] of the state into r' = [cos ur^,, cosiTj,, cos ucos ur^ +sinusinw] . 
It follows from Section |V] that in general this channel does not preserve the invariance of distillable key. In this case 
the procedure fails. The example of the results is shown in Fig. [Tj 



VII. CONCLUSIONS 



In the present paper the new symmetry of the states with perfect secure key called generalized private states have 
been provided which says that the most popular Devetak- Winter secret key rate is invariant in both scenarios of 
CCQ and CQQ type if the measurement bases, chosen in a wrong way, are rotated (in a sense of angular momentum) 
in addition around the axis corresponding to the secure basis by any angle. The symmetry has a particularly good 
interpretation when seen on a sphere since then the wrong is any basis corresponding to fi with an angle 9 to the z 
axis (corresponding to the secure basis) while the symmetry rotation is just the rotation by the <f> angle around the 
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FIG. 2: Starting point for the procedure {6o,Lpo), in which K {9o,<po) = Kdo- Point {9i,<pi), Kdo = K {9i,ipi) is closest to 
the point {6o,Lpo) in the given set becauseAJiToi — \Kno — Kdi\ is minimal (see text for details). Using the interpolation 
function one obtains that K (di, ip'i + A^s'i) = Kno, however, due to numerical error, in fact ip'i + A(pi =^ ifii, where the equality 
Ku {01, v'l + Aip'i) = K {9o, ipo) really holds. The case of the second point (^i, (p'2 + ALp'2) is similar. The error of the procedure 
is given by ( 36 1 . 



z axis. We have also proven that for the qubit key part the optimality of the z axis as the secure basis is preserved 
after the action of any bistochastic channel (i.e. the one represented by random Pauh rotations). 

The symmetry of the ideal p-bit lead us to the heuristic scheme of estimation of the optimal axis (with respect to 
the Devetak- Winter secret key rate i^Dw) which is valid for any state that has this type of symmetry of the rate 
under the rotation around the optimal basis. Namely given the density matrix, may be even in a numerical form, 
instead of searching over all sphere Alice may perform the analysis of the key over a ring around some chosen axis z' 
on the sphere and guess the optimal measurement axis only on the data based on this ring. 

The method generally has a ,,dualistic" character with respect to the channel action. If the Alice subsystem as the 
direction of the optimal axis unperturbed, than the results are good if the z' is chosen to be far form the (unknown) 
optimal one z while if there is a perturbation of the optimal direction z (in a sense of the shrinking of that direction 
on a Bloch sphere) then the closer is the chosen axis to the original one the result is better. Basing on the polynomial 
approximation of the key function on the chosen ring there is also the possibility of the derivation of the error bar 
of the procedure. The analysis of examples shows that the error bar in general bounds the actual value of the error 
made in the procedure. 

We believe that the present method may be especially useful when the large sample of data are provided and quick 
estimation of optimal Alice measurement is needed. 
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FIG. 3: The estimated error of the procedure (using formula (36l) - left plot, and the error of the procedure (absolute value of 
the difference between rotation angle and the angle calculated by the procedure A9 = \9 — 9m' \ ) -right plot vs. the number of 
points r=10n (n=l denotes that 10 points were used) for the rotated pswAP state. Rotation angle ^ = f 
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FIG. 4: The estimated error of the procedure (using formula (36l) - left plot and, the error of the procedure (absolute value of 
the difference between rotation angle and the angle calculated by the procedure AS = \6 — Sjv/'| ) -right plot vs. the number 
of points r=10n (n=l denotes that 10 points were used) for the state pswAP = Aa ® Iba'b' , where A(p) = p| -f (1 — p)p. 
Rotation angle 8 = ^, p=0.1. 
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FIG. 5: The estimated error of the procedure (using formula ( |36| l) - left plot and the error of the procedure (absolute value of 
the difference between rotation angle and the angle calculated by the procedure A9 — \9 — Sjv/'| ) -right plot vs. the number 
of points r=10n (n=l denotes that 10 points were used) for the state pswAP ~ Aa (8) Iba'b' , where A(p) = pp + (1 — p)azpaz. 
Rotation angle 6 = ^, p=0.3. 



11 



FIG. 6: The estimated error of the procedure (using formula (36 1) - left plot and the error of the procedure (absolute value of 
the difference between rotation angle and the angle calculated by the procedure = \6 — Oai'I ) -right plot vs. the number of 
points r=10n (n=l denotes that 10 points were used) for the state ppriv = ppswAP + (1 — p)pmswap- Rotation angle S = f , 
p=0.4. 
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FIG. 7: The estimated error of the procedure (using formula (36l) and the error of the procedure (absolute value of the 
difference between rotation angle and the angle calculated by the procedure A9 = \0 — Om'\ ) vs. the number of points r=10n 
(n=l denotes that 10 points were used) for the state ppriv = (Aa ® 1ba'b')pswap, Aa(p) = K\pK\ + KlpK2 where Ki are 
given by (451. Rotation angle 9 = u=0.1 vr, v=0.05 vr. 



